What is CVE-2026-88132?

CVE-2026-88132 is a security advisory published by Microsoft Security Response Center (MSRC) with High severity. Azure Key Vault Information Disclosure Vulnerability

Which CVE IDs does CVE-2026-88132 cover?

CVE-2026-88132 covers the following CVE IDs: CVE-2026-88132. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of CVE-2026-88132?

CVE-2026-88132 has a CVSS v3 base score of 5.9, published by Microsoft Security Response Center (MSRC).

Which products are affected by CVE-2026-88132?

CVE-2026-88132 affects 5 products, including: Azure Key Vault Client SDK; azure-keyvault-administration; azure-keyvault-certificates; azure-keyvault-keys; azure-keyvault-secrets.

CVE-2026-88132HighCVSS 5.9

Azure Key Vault Information Disclosure Vulnerability

Vendor

Microsoft Security Response Center (MSRC)

Published

October 13, 2026

Last Modified

—

🔗 CVE IDs covered (1)

CVE-2026-88132 →

📋 Description

Origin validation error in Azure Key Vault allows an unauthorized attacker to disclose information over a network.

🎯 Affected products5

Azure Key Vault Client SDK
azure-keyvault-administration
azure-keyvault-certificates
azure-keyvault-keys
azure-keyvault-secrets

✅ Remediation

KBRelease Notes (Security Update) — fixed build 4.10.2 KBRelease Notes (Security Update) — fixed build 4.9.2 KBRelease Notes (Security Update) — fixed build 4.11.2 KBRelease Notes (Security Update) — fixed build 4.8.2

🔗 References (9)

advisoryhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88132
patchhttps://www.nuget.org/packages/Azure.Security.KeyVault.Keys/4.10.2
referencehttps://github.com/Azure/azure-sdk-for-net/blob/Azure.Security.KeyVault.Keys_4.10.2/sdk/keyvault/Azure.Security.KeyVault.Keys/CHANGELOG.md
patchhttps://www.nuget.org/packages/Azure.Security.KeyVault.Certificates/4.9.2
referencehttps://github.com/Azure/azure-sdk-for-net/blob/Azure.Security.KeyVault.Certificates_4.9.2/sdk/keyvault/Azure.Security.KeyVault.Certificates/CHANGELOG.md
patchhttps://www.nuget.org/packages/Azure.Security.KeyVault.Secrets/4.11.2
referencehttps://github.com/Azure/azure-sdk-for-net/blob/Azure.Security.KeyVault.Secrets_4.11.2/sdk/keyvault/Azure.Security.KeyVault.Secrets/CHANGELOG.md
patchhttps://www.nuget.org/packages/Azure.Security.KeyVault.Administration/4.8.2
referencehttps://github.com/Azure/azure-sdk-for-net/blob/Azure.Security.KeyVault.Administration_4.8.2/sdk/keyvault/Azure.Security.KeyVault.Administration/CHANGELOG.md